> > I am working on a specialized Debian GNU/Linux operating system that
> > emphasizes security. Part of the project involves two patches for
> > iptables: IMQ[1] and GrSecurity's STEALTH[2]
> > 
> >   1. http://luxik.cdi.cz/~patrick/imq/
> >   2. http://www.grsecurity.net
> > 
> > currently, I need to patch iptables to package it for Debian, it would
> > be nice if these patches would make it into upstream.
Hmm
GRsecurity includes an iptables module called STEALTH, i've never tested
it, and do not find it very important, as its functionality can be aquired
by wise usage of PSD tcp-flags and state matching.

Do you find it really usefull (_and working_ as described) ?

Also, current official grsecurity patches patch up to
2.4.18pre1.
 
I do not know what IMQ is, i will see.

Regards,
Maciej Soltysiak


Reply via email to